(Optional) Add Archiver as Data Source

You must configure Archiver, to be able to use data from Archiver data source to generate Reports and Alerts:

Prerequisites

Make sure that you have:

  1. Installed the NetWitness Archiver host in your network environment. For more information, see the Hosts and Services Getting Started Guide.
  2. Installed and configured Log Decoder in your network environment. For more information, see "Add Log Decoder as a Data Source to Archiver" in the Archiver Configuration Guide.
  3. Reporting Engine service is available in your NetWitness deployment.
  4. Added Archiver service to your NetWitness deployment. For more information, see "Add the Archiver Service" in the Archiver Configuration Guide.
  5. Applied license to the Archiver service.

To add Archiver Data Source to Reporting Engine:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.
  2. In the Services list, select the Reporting Engine service.
  3. Click netwitness_ic-actns.png > View > Config.

    The Services Config View of Reporting Engine is displayed.

  4. Select the Sources tab.
  5. Click netwitness_add.png and select Available Services.

    The Available Services dialog is displayed.

    netwitness_archiver_available.png

  6. Select the Archiver service and click OK.

    The service authentication dialog box is displayed.

    Note: The services with the Trust Model enabled must be added individually. You are prompted to provide a username and password for the selected service.

  7. Enter the Username and Password for the Archiver.
  8. Click OK.

    The selected Archiver is listed in the Aggregate Services pane.